Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File: P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier: 312lJrV8XuyF4RiT1wUWCiQJAtttcaSzUi/BahWyzoE=
Subject key identifier: 2F:56:B8:6C:F2:68:E3:E5:D5:88:CB:11:6C:8C:8F:E4:39:13:23:7F
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial: 019FA975BB37E70254724AA5B04E383FE75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number: 0FBF
Signing time: Tue 28 Jul 2026 16:01:32 +0000
Manifest this update: Tue 28 Jul 2026 16:01:32 +0000
Manifest next update: Wed 29 Jul 2026 16:01:32 +0000
Files and hashes: 1: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: eBocCZomw9VuOo9/5oyEaZbk+CuqVM0YifAHkjUUUVc=)
2: SaGiZjjt90SX7-BzKCTX7bYUJCE.roa (hash: shQxuuEzemQfoeUgl6rxwi+Wbc4ekvnlLIFK68Q9YjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:bb:37:e7:02:54:72:4a:a5:b0:4e:38:3f:e7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Validity
Not Before: Jul 28 16:01:32 2026 GMT
Not After : Jul 29 16:01:32 2026 GMT
Subject: CN=2f56b86cf268e3e5d588cb116c8c8fe43913237f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:20:5f:5e:d1:89:1e:5e:a8:fc:27:72:10:
4d:1c:19:92:9e:68:e4:48:db:85:d8:b4:cd:4e:70:
5d:80:46:1a:64:4c:51:e3:85:21:e6:8b:f0:c2:61:
0a:00:32:24:79:85:d0:64:aa:f8:8f:7d:58:32:4f:
ac:c0:72:67:0c:70:4d:7e:e9:ae:3c:2e:cc:3b:7f:
1c:f1:be:63:14:ec:a8:b0:30:da:08:c5:fa:80:c3:
f6:72:60:0a:0b:5e:53:47:58:35:22:86:01:33:98:
0a:0f:79:1e:07:8d:13:67:c2:ea:1b:00:9d:ac:d3:
e9:ab:7b:08:e1:12:23:cb:46:3e:7b:14:00:ca:ba:
54:5c:11:8c:1e:28:b9:18:7a:3d:f4:9b:a5:36:66:
92:4e:09:8d:d5:54:61:ac:0d:5b:6c:98:f4:8d:e1:
a0:28:59:51:90:03:77:96:13:22:bd:a6:bc:92:37:
a7:35:38:72:79:b9:57:19:0b:1c:de:d0:c5:a4:3f:
bd:a8:5f:2d:f8:d7:a5:39:08:08:61:8a:06:53:b7:
75:96:f9:bc:23:41:10:8d:8c:38:77:bf:a1:29:3e:
60:82:41:88:b3:3f:0c:24:40:b8:dc:1d:1a:37:f4:
ea:5e:87:94:da:de:c1:42:9c:65:64:5d:37:33:e4:
05:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:56:B8:6C:F2:68:E3:E5:D5:88:CB:11:6C:8C:8F:E4:39:13:23:7F
X509v3 Authority Key Identifier:
keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1b:17:8f:ec:48:ad:46:8d:c4:d6:42:bf:a9:1c:57:06:8f:
14:22:09:4e:8e:71:b5:c7:c9:3f:c0:b7:91:f2:77:8f:e8:e4:
c6:6d:02:b5:e9:a6:c6:26:31:87:f3:01:ec:74:f0:a1:42:70:
69:db:da:13:3f:3a:9a:d6:cf:77:bb:27:dc:07:34:6d:76:49:
88:26:0c:34:15:09:6c:df:42:5d:2a:6a:31:bd:f6:b7:34:a1:
9b:57:43:0b:e6:8c:00:32:b7:6f:53:95:09:ac:dc:ec:f9:13:
75:a1:c2:1b:85:45:1c:45:c2:13:ff:5f:b7:65:99:64:76:81:
8c:b7:9a:36:16:40:08:69:8d:7b:78:d0:ef:b3:da:c2:04:e6:
50:17:17:36:db:6f:37:02:8f:95:e9:a9:31:32:aa:87:1c:ea:
47:39:39:1f:88:bb:ec:5f:15:13:a4:ce:cd:62:3a:84:e3:81:
4e:65:39:60:ad:20:c4:f2:0f:cd:b8:8d:f6:7e:c8:8c:92:8e:
0d:e6:80:93:78:34:df:41:a7:a4:b8:d5:51:83:87:68:ba:fe:
0e:d4:ec:65:24:14:0c:04:06:c9:68:fb:1f:9d:3b:1c:44:3c:
bc:16:bd:cd:19:b6:62:1a:6d:65:37:c6:1a:68:bc:e3:a8:77:
1e:0b:19:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:49:55 2026 by rpki-client